1162 matches found
EUVD-2025-197818
Glob matches files using patterns the shell uses. From versions 10.3.7 to 11.0.3, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are used, matched filenames are passed ...
CVE-2025-64756
CVE-2025-64756 is a command-injection vulnerability in glob's -c/--cmd handling. The IBM bulletins show this CVE affecting IBM Maximo Application Suite components (e.g., Visual Inspection) and related bundles, with remediation by upgrading the affected glob component to 10.5.0 or 11.1.0 (patches ...
CVE-2025-64756
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...
1k-tasks (>=3.3.0, <=3.6.1), @1delta/aggregators (>=0.1.0, <=0.1.6) +2296 more potentially affected by CVE-2025-64756 via glob (>=10.2.1, <=10.4.5)
glob NPM version =10.2.1, =3.3.0, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.0.0, =0.8.1, =1.0.0, =1.0.0, =1.0.1 - @aaronngray/typeorm-seeding 6.0.1 - @abasync/eslint-config 1.1.0 - @abc45676/mailer 1.0.0 and more Source cves: CVE-2025-64756 Source advisory: MEND:CVE-2025-64756...
1k-tasks (>=4.0.0, <=4.2.2), @514labs/sloan-mcp (0.0.68) +1068 more potentially affected by CVE-2025-64756 via glob (>=11.0.0, <=11.0.3)
glob NPM version =11.0.0, =4.0.0, =0.1.0, =4.10.0, =16.5.13, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.5-alpha.2, =0.1.4-alpha.0, =0.1.1, =0.1.6 and more Source cves: CVE-2025-64756 Source advisory: MEND:CVE-2025-64756...
CVE-2025-64756 glob CLI: Command injection via -c/--cmd executes matches with shell:true
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...
CVE-2025-64756
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...
Glob 操作系统命令注入漏洞
Glob is a file matching software by isaacs individual developers. An operating system command injection vulnerability exists in Glob versions 10.3.7 through 11.0.3, which stems from command injection and could lead to arbitrary code execution...
PT-2025-47185
Name of the Vulnerable Software and Affected Versions Glob versions 10.3.7 through 11.0.3 Description The glob command-line interface contains a command injection issue in its -c/--cmd option. This allows arbitrary command execution when processing files with maliciously crafted names. When using...
CVE-2025-64756: Improper Neutralization of Special Elements used in an OS Command
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are...
EUVD-2011-2160
Malware in sbrugna...
EUVD-2017-16124
Malware in sbrugna...
EUVD-2008-0158
Malware in sbrugna...
EUVD-2007-4763
Malware in sbrugna...
EUVD-2010-4720
Malware in sbrugna...
EUVD-2010-4719
Malware in sbrugna...
EUVD-2017-7122
Malware in sbrugna...
EUVD-2001-0869
Malware in sbrugna...